Itechscripts: >> Itechclassifieds Security Vulnerabilities
SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685.
CVSS Score
7.5
EPSS Score
0.011
Published
2015-01-13
Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter.
CVSS Score
4.3
EPSS Score
0.003
Published
2008-02-12
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.
CVSS Score
7.5
EPSS Score
0.002
Published
2008-02-12